morphit/ops/ansible/roles/hardening/handlers/main.yml

35 lines
815 B
YAML

---
- name: Restart sshd
ansible.builtin.systemd:
name: ssh
state: restarted
daemon_reload: false
- name: Apply sysctl
ansible.builtin.command: sysctl --system
changed_when: true
- name: Reload audit rules
ansible.builtin.command: augenrules --load
changed_when: true
- name: Restart auditd
# auditd doesn't support `systemctl restart` cleanly on some
# distros — use service to be safe.
ansible.builtin.command: service auditd restart
changed_when: true
- name: Restart postfix
ansible.builtin.systemd:
name: postfix
state: restarted
- name: Rebuild postfix sasl map
ansible.builtin.command: postmap /etc/postfix/sasl_passwd
changed_when: true
notify: Restart postfix
- name: Restart fail2ban
ansible.builtin.systemd:
name: fail2ban
state: restarted